Positive control (security)

{
  "id": "MLC-T-CYB-003197",
  "term": "Positive control (security)",
  "field": "Cybersecurity",
  "definition": "Active form of security monitoring where an unexpected result generates an alarm. Note: The unexpected result generates an alarm because a positive control test was executed against a registered data set in which the correct result is very well-known, but the expected result was not returned or observed.",
  "references": [
    "CNSSI 4009-2022",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/positive-control-security/"
}